lmromax/laravel-ai-sentinel

Maintainerscaution

Only one registry account has publish access. Because the repository is user-owned rather than organization-backed, this represents a thin publishing base, although it does not by itself prove abandonment.

Release historycaution

The package has only two releases, both within its first six months, and no newer release is shown after March 24, 2026. This gives limited evidence of sustained maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, despite the project being relatively new. That weakens evidence of ongoing support.

Security policycaution

The linked repository has no security policy. For a package that logs prompts and handles AI-service integrations, this reduces transparency about vulnerability reporting and response.

Workflow auditcaution

Both workflows were fully analyzed with no dangerous triggers or audit findings, but all five action references are unpinned. This is a workflow-reproducibility and supply-chain hygiene gap.